CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
80.5%
It was discovered that VLC incorrectly handled certain media files. If a
user were tricked into opening a specially-crafted file, a remote attacker
could use this issue to cause VLC to crash, resulting in a denial of
service, or possibly execute arbitrary code.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 19.04 | noarch | vlc | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlc-bin | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlc-bin-dbgsym | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlc-dev | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlc5 | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlc5-dbgsym | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlccore-dev | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlccore9 | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | libvlccore9-dbgsym | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
Ubuntu | 19.04 | noarch | vlc-bin | < 3.0.8-0ubuntu19.04.1 | UNKNOWN |
ubuntu.com/security/CVE-2019-13962
ubuntu.com/security/CVE-2019-14437
ubuntu.com/security/CVE-2019-14438
ubuntu.com/security/CVE-2019-14498
ubuntu.com/security/CVE-2019-14533
ubuntu.com/security/CVE-2019-14534
ubuntu.com/security/CVE-2019-14535
ubuntu.com/security/CVE-2019-14776
ubuntu.com/security/CVE-2019-14777
ubuntu.com/security/CVE-2019-14778
ubuntu.com/security/CVE-2019-14970
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
80.5%